SID_MAX_SUB_AUTHORITIES
sid->sub_authority_count <= SID_MAX_SUB_AUTHORITIES;
#define MAX_SID_SIZE (8 + SID_MAX_SUB_AUTHORITIES*4)